Portal as an SSL terminator for `nanobox run`

portal.md

Download portal for your OS.

Create a config file for portal

config.json

{
 "db-connection": "scribble:///tmp/portal",
 "log-level": "info",
 "server": true,
 "just-proxy": true
}

Start portal

sudo portal -c /tmp/portal/config.json

Create a self-signed cert to use

openssl req -x509 -newkey rsa:1024 \
-keyout /tmp/key.pem -out /tmp/cert.pem \
-days 365 -nodes \
-subj "/C=US/ST=Idaho/L=Rexburg/O=Nanobox/OU=Org/CN=localhost"

Add cert to portal

portal -i add-cert -C "$(cat /tmp/cert.pem)" -k "$(cat /tmp/key.pem)"

Start your nanobox project

nanobox run
...
+ If you run a server, access it at >> 172.19.0.5

Add your project as a target to portal

portal -i add-route -j '{"path":"/","targets":["http://172.19.0.5:8080"]}'

You may also configure the following for a portal route:

• subdomain
• domain
• fwdpath
• page

Visit your app

curl -k https://localhost

z-example-certs.md

key.pem

-----BEGIN PRIVATE KEY-----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-----END PRIVATE KEY-----

cert.pem

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----